Could it be part of the protocol that relays only send encrypted messages if they know the person receiving is the intended recipient? In that sense the relay is behaving more like a private server and should solve any privacy concerns.